$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa File: c3a4120a-832f-3d49-9b46-e10f35565a99.roa (raw, json) Hash identifier: 1lfnhSdK0R1O2AEfsVzQwibae90Yd+nBJEjYNqTsFlA= Subject key identifier: 95:76:A2:06:FE:9E:38:8D:08:58:37:0B:91:52:23:D9:E6:C0:94:9F Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285849BC74B1388FDE9CCC3E37D740 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 31898 IP address blocks: 174.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:b1:38:8f:de:9c:cc:3e:37:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=8d1993e9-c5e8-49a4-9aad-1ed7b32f636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:d2:6d:b6:ea:34:1b:dc:fa:cf:88:81:22: 91:19:e3:a5:98:37:08:87:db:08:82:d7:7e:4d:b9: 39:2f:d9:0f:f9:65:cd:9d:3a:d7:9d:21:c8:90:9e: fa:82:54:6d:a8:e8:ec:ea:27:a4:18:a0:e5:54:a6: 4d:a2:74:dd:be:6c:54:e5:fd:29:77:3f:d7:14:00: ba:e9:9a:fc:db:34:9e:1e:24:41:53:95:b9:31:11: 1a:fc:6d:35:6a:9a:a4:51:4d:2c:e3:31:d1:da:1b: f4:cf:08:6e:38:79:67:39:bd:2a:09:85:9c:db:d1: 26:a3:52:62:48:eb:45:36:60:2e:d8:d1:4f:ef:a3: 08:08:ae:80:b7:2a:e0:1f:1c:f2:3c:fd:60:dc:29: 87:a3:ad:db:31:2d:5e:9a:03:3e:21:d7:e8:6e:eb: d7:7d:4b:a9:9d:59:36:36:c5:c1:c9:64:13:9e:be: 50:ef:0f:e1:91:70:ec:d1:cf:16:a7:33:9a:5a:e1: d4:78:a3:8e:28:31:12:3f:d0:31:70:1f:78:b6:5d: 1c:c5:57:51:9a:4d:76:14:2e:80:61:cd:b4:78:bc: 42:3d:65:07:37:7d:52:c2:ff:46:fc:d7:47:ac:37: 22:69:b3:19:7d:94:87:1f:11:29:d9:60:8e:42:eb: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:A2:06:FE:9E:38:8D:08:58:37:0B:91:52:23:D9:E6:C0:94:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:04:15:7b:7a:22:f6:ff:8c:1a:32:c9:d7:c9:c2:d8:83:e9: 12:13:5a:5d:a9:5c:5e:9d:ad:ad:42:72:37:b4:13:f3:49:bb: d9:22:ec:f9:ce:58:9c:42:d4:2f:77:84:b7:34:ee:6a:6d:f5: f3:1d:56:ff:47:ad:4d:e8:0d:41:e0:50:c6:2c:4e:38:23:09: eb:d8:18:fd:08:01:05:90:fc:a7:75:94:8b:80:9c:d2:93:35: a9:ee:5b:88:b0:ba:09:89:03:21:de:e8:cf:c1:7f:3f:64:a7: 26:52:be:e2:b6:6c:38:06:00:ef:2f:40:2b:eb:ca:10:a6:37: 3a:22:47:98:ae:b0:2d:58:11:5d:c5:87:5e:80:f4:94:95:f5: 10:d9:7f:68:18:17:17:8e:11:4d:08:3d:b5:fe:49:6d:35:61: 70:12:24:1c:3d:25:ca:1e:2f:f3:2a:27:67:53:06:83:3a:12: 38:05:bb:b7:48:5f:bb:d2:df:87:ff:16:6d:55:53:ff:4f:cc: a5:15:20:af:ee:c0:a5:7e:a6:93:47:f9:27:5d:d8:95:0b:55: 34:08:90:5b:b9:86:7a:3f:4c:7a:06:78:cc:1f:21:94:7f:58: 87:b6:b9:76:0e:7a:85:93:ae:66:1d:7a:91:a2:73:f9:c9:7a: 6f:38:2a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dLE4j96czD4310AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk OGQxOTkzZTktYzVlOC00OWE0LTlhYWQtMWVkN2IzMmY2MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghLSbbbqNBvc+s+IgSKRGeOlmDcIh9sIgtd+ Tbk5L9kP+WXNnTrXnSHIkJ76glRtqOjs6iekGKDlVKZNonTdvmxU5f0pdz/XFAC6 6Zr82zSeHiRBU5W5MREa/G01apqkUU0s4zHR2hv0zwhuOHlnOb0qCYWc29Emo1Ji SOtFNmAu2NFP76MICK6AtyrgHxzyPP1g3CmHo63bMS1emgM+IdfobuvXfUupnVk2 NsXByWQTnr5Q7w/hkXDs0c8WpzOaWuHUeKOOKDESP9AxcB94tl0cxVdRmk12FC6A Yc20eLxCPWUHN31Swv9G/NdHrDciabMZfZSHHxEp2WCOQutfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV2ogb+njiNCFg3C5FSI9nmwJSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzNhNDEyMGEtODMyZi0z ZDQ5LTliNDYtZTEwZjM1NTY1YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsEFXt6Ivb/jBoyydfJwtiD6RITWl2pXF6dra1Ccje0E/NJu9ki7PnO WJxC1C93hLc07mpt9fMdVv9HrU3oDUHgUMYsTjgjCevYGP0IAQWQ/Kd1lIuAnNKT NanuW4iwugmJAyHe6M/Bfz9kpyZSvuK2bDgGAO8vQCvryhCmNzoiR5iusC1YEV3F h16A9JSV9RDZf2gYFxeOEU0IPbX+SW01YXASJBw9JcoeL/MqJ2dTBoM6EjgFu7dI X7vS34f/Fm1VU/9PzKUVIK/uwKV+ppNH+Sdd2JULVTQIkFu5hno/THoGeMwfIZR/ WIe2uXYOeoWTrmYdepGic/nJem84KjE= -----END CERTIFICATE-----Generated at Tue May 13 09:57:20 2025 by rpki-client